ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-5419

—
CVSS 3.0
7.5 high
EPSS
16%p97
Published
()
Modified
Description

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

Vendors
haxxdebianopensuse
Products
libcurl, debian linux, leap
Weakness
CWE-310
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (15.9%)

In the news

No ingested article mentions this CVE yet.